This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json) Hash identifier: jXcolZHHsjREy7oLypyMTrz4U8XTgQawFkWhQL7JOh0= Subject key identifier: 8C:BB:8D:EB:51:66:D0:DB:88:9E:FB:7B:73:0B:DC:41:F1:0F:20:97 Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf Certificate serial: 019C427D23E1A0D6EF63A31BD040AD1660A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft Manifest number: 151E Signing time: Mon 09 Feb 2026 13:00:23 +0000 Manifest this update: Mon 09 Feb 2026 13:00:23 +0000 Manifest next update: Tue 10 Feb 2026 13:00:23 +0000 Files and hashes: 1: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: QufulgpSCtml2HuacLKQup22JxflPQko5FeZp7ZS3z8=) 2: tt6jpkDuqE0CT-_FmJx73h6zRuI.roa (hash: YjG/I9+R+aYdPBq5tPHljKWlpfWn8OqsHy3BqigHS4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:23:e1:a0:d6:ef:63:a3:1b:d0:40:ad:16:60:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf Validity Not Before: Feb 9 13:00:23 2026 GMT Not After : Feb 10 13:00:23 2026 GMT Subject: CN=8cbb8deb5166d0db889efb7b730bdc41f10f2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:37:be:93:42:3f:3a:e0:c7:4e:38:d6:f9: 66:45:b9:72:19:60:da:ab:bc:27:b1:3a:b1:85:70: 7c:1b:16:6f:d0:cc:85:95:d2:71:5e:31:dd:cd:bb: 1f:86:de:ed:be:90:95:0d:63:aa:02:90:b9:6f:88: f6:84:61:15:58:22:96:aa:e0:bb:92:91:64:12:7e: 00:ab:4e:bc:ec:ce:be:40:b5:d1:4a:9e:a6:ae:75: b9:28:10:bc:97:c8:04:b6:c8:89:e8:af:c4:25:d7: d9:f6:d3:6a:a6:fb:80:f5:c2:fd:80:ec:e9:1c:58: 07:e4:8c:a9:08:41:b0:c0:a0:71:14:06:b4:79:3d: fd:28:bc:57:52:f5:d8:7d:9e:ef:c6:39:4d:7c:1f: c6:c4:ea:f9:a0:8a:63:d8:99:2c:3b:c1:9a:ad:77: 48:35:3b:45:4c:28:ef:bd:7b:f4:8c:dc:85:67:27: 50:b7:a2:c8:0a:0f:81:d8:5c:29:d6:a9:3b:8b:29: e7:61:f5:ea:99:a5:48:ab:5b:e6:fc:c1:dd:6e:3e: 0b:2e:70:bb:7e:3a:62:80:42:b1:18:fb:b8:5b:fc: f2:47:5a:e0:d2:33:08:28:8f:d3:4f:04:7d:4d:22: 04:e3:59:6a:a9:68:37:d9:ae:fe:cd:dd:a6:08:36: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:8D:EB:51:66:D0:DB:88:9E:FB:7B:73:0B:DC:41:F1:0F:20:97 X509v3 Authority Key Identifier: keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:33:52:3c:95:d4:79:92:1e:a2:1f:80:60:df:e1:28:b5:84: 28:34:23:61:84:3e:1f:1d:56:bc:87:21:a2:05:2f:5f:18:84: ef:a3:e3:b7:53:ca:35:30:77:c1:2a:4e:14:37:4b:93:cf:6d: 1a:87:da:d7:b8:58:f1:90:6d:3e:c4:6a:32:a3:13:a5:d2:ab: 21:83:83:a4:f9:f5:a0:7c:8b:81:8b:5b:29:cc:83:c6:b5:a2: 86:6f:d4:d1:47:57:7c:1b:d9:c6:a6:f9:2c:c9:1b:05:84:01: d3:de:ce:af:8d:c4:58:a8:0a:19:ed:75:b1:d7:23:3f:7a:42: 35:23:ea:c6:8f:bc:3d:83:6d:cc:dc:1b:0a:ee:82:d0:77:0b: d0:16:48:b5:93:26:48:45:b0:4c:4e:0e:b5:68:04:c8:8b:c1: 3e:87:e8:f6:2d:25:21:1d:ff:e0:02:2a:d3:cc:e9:f2:72:3e: 0c:69:d8:5b:74:09:52:e1:e4:4f:50:8c:01:9f:0d:2b:a8:c8: 8e:25:15:98:0f:d5:78:f9:44:d2:7c:f6:01:c3:0b:06:3d:00: ee:cf:70:88:eb:19:00:d6:8e:1c:f2:cf:0a:05:de:d9:8d:5b: f4:51:93:8e:96:40:e8:c3:9f:94:60:9e:3e:07:c2:94:67:7a: d8:f6:0a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSPhoNbvY6Mb0ECtFmCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl NjU0Y2YwHhcNMjYwMjA5MTMwMDIzWhcNMjYwMjEwMTMwMDIzWjAzMTEwLwYDVQQD Eyg4Y2JiOGRlYjUxNjZkMGRiODg5ZWZiN2I3MzBiZGM0MWYxMGYyMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9I3vpNCPzrgx0441vlmRblyGWDa q7wnsTqxhXB8GxZv0MyFldJxXjHdzbsfht7tvpCVDWOqApC5b4j2hGEVWCKWquC7 kpFkEn4Aq0687M6+QLXRSp6mrnW5KBC8l8gEtsiJ6K/EJdfZ9tNqpvuA9cL9gOzp HFgH5IypCEGwwKBxFAa0eT39KLxXUvXYfZ7vxjlNfB/GxOr5oIpj2JksO8GarXdI NTtFTCjvvXv0jNyFZydQt6LICg+B2Fwp1qk7iynnYfXqmaVIq1vm/MHdbj4LLnC7 fjpigEKxGPu4W/zyR1rg0jMIKI/TTwR9TSIE41lqqWg32a7+zd2mCDbVowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy7jetRZtDbiJ77e3ML3EHxDyCXMB8GA1UdIwQY MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt MTg3MjNjODQxMTIxLzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzzNSPJXU eZIeoh+AYN/hKLWEKDQjYYQ+Hx1WvIchogUvXxiE76Pjt1PKNTB3wSpOFDdLk89t Gofa17hY8ZBtPsRqMqMTpdKrIYODpPn1oHyLgYtbKcyDxrWihm/U0UdXfBvZxqb5 LMkbBYQB097Or43EWKgKGe11sdcjP3pCNSPqxo+8PYNtzNwbCu6C0HcL0BZItZMm SEWwTE4OtWgEyIvBPofo9i0lIR3/4AIq08zp8nI+DGnYW3QJUuHkT1CMAZ8NK6jI jiUVmA/VePlE0nz2AcMLBj0A7s9wiOsZANaOHPLPCgXe2Y1b9FGTjpZA6MOflGCe PgfClGd62PYKPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:52 2026 by rpki-client